Privacy Policy

---

Effective date: 1 May 2026

Last updated: 20 May 2026

Zadi Studios currently operates below the $3 million turnover threshold that exempts most small businesses from the Privacy Act. The Australian Government has flagged its intention to remove this exemption, with a possible phase-in by December 2026, though the exact timing has not yet been finalised in legislation. Because we will be collecting health-related information for safety purposes (once we open), we have chosen to comply with the Australian Privacy Principles (APPs) and the Notifiable Data Breaches scheme proactively, ahead of any change in the law.

Zadi Studios (Tamasin Chugg, ABN 58 294 309 406) is committed to protecting the privacy of all participants, visitors and website users. This Privacy Policy explains how we collect, use, store and disclose your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. WHAT INFORMATION WE COLLECT

We collect personal information that is reasonably necessary to operate our studio and provide our services, including:

- Booking information: name, email address, phone number, session date and type, payment information. Used to process and confirm bookings, communicate about sessions, and send reminders.

- Safety information: date of birth (to confirm minimum age), medical conditions you disclose. Used to comply with our WHS obligations and ensure safe participation.

- Emergency contact details: name, relationship and phone number of an emergency contact, provided by participants and spectators. Used solely to contact someone on your behalf in the event of a medical or safety emergency.

- Waiver records: signed participant waivers including health declarations, age confirmations and parent/guardian details. Retained for a minimum of 7 years as a legal requirement.

- Spectator and visitor information: name and phone number of visitors accompanying a participant, collected via QR code acknowledgement. Used to record that visitors have acknowledged studio risks and agreed to remain in the spectator area.

- Payment information: credit card details processed via Stripe. We do not store card numbers. Used to process payment for bookings and gift cards.

- Website usage: IP address, browser type, pages visited, time on site, via cookies and analytics. Used to improve our website and understand how it is used.

- Survey responses: product preferences, price expectations, booking intentions and, if provided, your email address. Used to understand demand and shape our product range and pricing before and after opening.

- Marketing: email address and communication preferences if you opt in to receive news from us. Used to send newsletters, promotions and updates, only with your consent.

- Photographs: images taken during sessions if you have consented. Used in marketing with your explicit consent only.

2. HOW WE COLLECT YOUR INFORMATION

- Directly from you, when you make a booking, sign a waiver, complete a survey, contact us or subscribe to our mailing list

- From your device, when you visit our website, certain information is collected automatically

- From third parties, our booking platform and payment processor (Stripe) share information necessary to process your transaction

3. HOW WE USE YOUR INFORMATION

We use personal information only for the purposes for which it was collected or for a directly related purpose you would reasonably expect, including:

- Processing and managing your bookings

- Communicating with you about your session, confirmations, reminders, instructions

- Complying with our WHS and legal obligations

- Sending marketing communications, only with your explicit consent, and only where you have opted in

- Understanding demand and shaping our product range and pricing based on survey feedback

- Improving our website and services

- Responding to your enquiries and complaints

- Complying with any law, court order or regulatory requirement

4. WHO WE SHARE YOUR INFORMATION WITH

We do not sell, rent or trade your personal information. We may share it with:

- Our booking platform provider, to manage session bookings

- Stripe, to process payments securely

- Mailchimp, our email service provider, to send booking confirmations, surveys and, if you have opted in, marketing emails

- Google Forms or our survey provider, to collect and store your survey responses, where applicable

- Emergency services, in the event of a medical emergency where disclosure is necessary to protect your life or safety

- Legal or regulatory authorities, where required by law

All third-party service providers we use are required to handle your personal information securely and in accordance with applicable privacy laws.

5. SENSITIVE INFORMATION

We collect limited sensitive information (health-related information disclosed in your waiver, including medical conditions relevant to participation). This information is collected only to ensure your safety during sessions. It is stored securely, accessed only by Tamasin Chugg and instructors who need it for safety purposes, and is not used for any other purpose. We will always seek your consent before collecting sensitive information beyond what is required for safety purposes.

6. DATA SECURITY

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification or disclosure, including:

- Secure password-protected systems for all digital records

- Physical security for signed paper waivers (locked storage)

- Payment processing via Stripe, which is PCI DSS compliant. We do not store credit card numbers.

- Limiting access to personal information to those who need it

We cannot guarantee absolute security of information transmitted over the internet. If you have concerns about transmission security, please contact us by phone.

7. DATA RETENTION

We retain your personal information for as long as necessary for the purposes for which it was collected, or as required by law:

- Signed participant waivers (adults): minimum 7 years from session date

- Signed participant waivers (minors): until the participant turns 25, or 7 years from session date, whichever is longer

- Spectator and visitor acknowledgements: 12 months from the date of visit

- Booking records: 7 years (tax and accounting obligations)

- Payment records: 7 years (ATO requirements)

- Survey responses: 12 months, or until no longer needed for product and pricing decisions

- Marketing opt-in records: until you unsubscribe, then deleted within 30 days

- Website analytics: 26 months (Google Analytics default) or as configured in our analytics platform settings

When personal information is no longer required we will securely destroy or de-identify it.

8. YOUR RIGHTS

You have the right to:

- Access the personal information we hold about you

- Request correction of inaccurate, incomplete or outdated information

- Withdraw consent for marketing communications at any time by clicking "unsubscribe" in any email or contacting us directly

- Make a complaint about how we have handled your personal information

To exercise any of these rights, contact us at contact@zadistudios.com.

9. COOKIES & WEBSITE ANALYTICS

Our website uses cookies and analytics tools including [INSERT — e.g. Google Analytics] to understand how visitors use our site. Cookies are small text files stored on your device. You can disable cookies through your browser settings, though this may affect some website functionality. We do not use cookies to collect personally identifiable information beyond what is necessary for website operation.

10. PHOTOGRAPHY & SOCIAL MEDIA

We may take photographs or video during sessions for marketing purposes, including on our website, Instagram, and other social channels. We will always ask for your verbal and signed consent before doing so. If you do not wish to be photographed, please let your instructor know. If you have previously consented and change your mind, contact us and we will remove any identifiable images as promptly as practicable.

11. CHILDREN'S PRIVACY

We collect personal information about minors (persons under 18) only as necessary for their safe participation and only with the consent of a parent or guardian who provides and accepts the information on the minor's behalf. Minors' information is handled with additional care and is never used for marketing purposes.

12. SPECTATORS AND VISITORS

If you accompany a participant as a spectator, we collect limited information (your name and phone number) via a Visitor & Spectator Acknowledgement, typically completed through a QR code at check-in. This information is used only to record that you have acknowledged the studio's risks and is retained for 12 months. It is not used for marketing unless you separately opt in.

13. DATA BREACH NOTIFICATION

While Zadi Studios is not currently required to comply with the Notifiable Data Breaches (NDB) scheme under the Privacy Act due to our size, we have adopted this scheme as our own practice given the sensitivity of the health information we collect. If we experience a data breach that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) as soon as practicable, along with recommended steps you can take to protect yourself.

14. AUTOMATED DECISION-MAKING

Zadi Studios does not use automated decision-making or artificial intelligence to make decisions about you, your bookings, or your eligibility to participate in our sessions. All decisions about bookings, safety and participation are made by a person.

15. COMPLAINTS

If you believe we have mishandled your personal information, please contact us first at contact@zadistudios.com. We will respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or on 1300 363 992.

16. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements, including any future changes to the small business exemption described above. The current version will always be published on our website. We will notify you of material changes by email if we hold your email address.

17. CONTACT

Tamasin Chugg

Email: contact@zadistudios.com

Phone: 0401 177 057

Website: www.zadistudios.com

—

Zadi Studios | ABN 58 294 309 406